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Protection techniques 
ensure |iC reliability in 
power-control circuits 

Richard J Valentine, Motorola Inc 



Protecting the (xC is critical in power-control 
applications. Protection methods range from 
limiting input voltages and noise spikes | 4 
to preventing an out-of-control program 
from locking up the p,C. 



]ountless numbers of products contain microcontrollers 
ijlCs) that manage critical control elements. In large motor- 
ontrol systems, failure of the p,C or other critical compo- 
nents to perform properly can cause serious injury to the 
isers or bystanders. You need to take special steps to protect 
he \lC in such systems. Because the jjlC manages most, if not 
ill, of the control design's functions, understanding how to 
jroperly protect the |*C will lead to more reliable controls. 
By incorporating numerous protection methods, you can 
greatly improve the reliability of the jtC. 

Adequate protection comes in many forms. Various meth- 
ods that limit voltage spikes — such as simple RC filters and 
voltage clamps — greatly increase the nC's reliability in 
power-laden designs. Depending on the application and 
EMI concerns, simple; RC filters do not exhibit the arrupt 
voltage response of diodes or zener clamping devices. Setting 
the frequency response of each p,C line using filter networks 
minimizes unwanted noise spikes from corrupting valid sig- 
nals. In addition to controlling voltage levels, noise spikes 
and EMI, you need to deal with potential program bugs and 
environmental concerns. 

~ I". ; i iff*: ■ 

: 

.vQOw the failure modes 

Fortunately, designing a reliable fault-tolerant p.C-based 
product is not too difficult when you recognize the areas of 
inadequate protection. Figure la shows a typical power-con- 



trol circuit and the problem areas; the circuit in Figure lb 
incorporates various protection circuits to prevent those 
problems. Several potential failure modes can occur, includ- 
ing the following: 

• Intermittent power or sensor connection (loose wires or 
connectors), 

• Reversal of power connections (user hookup error), 

• Power-stage transistor short (induced by poor thermal 
interface or short), 

• jjlC computational error (caused by undiscovered soft- 
ware bug), 

• Latent ESD damage to active components (static charge 
during assembly), 

• Motor-bearing failure (poor lubrication or excessive rev- 
olutions per minute), 

• Motor-shaft lockup due to external mechanical mishap 
(user misuse), 

• A few more that you can't imagine but will happen 
(unknown failure modes). 

"Unknown failure modes" is the most disconcerting cate- 
gory. You need to understand which part of the electronics 
system is the most potentially dangerous and then decide 
how to deal with it. In the motor-control example of Figure 
1, the motor is the most hazardous element. In the case of 
an open sensor or software glitch, turning off the power 
stage, which turns off the motor, is appropriate. This action 
disables the motor, thereby stopping any mechanical move- 
ment that may cause harm. Such thinking is a good start but 
assumes that the power stage or the |xC control device is not 
one of the parts that can fail. 

In addition to motor controllers, other jxC-based designs 
that control ac loads or relays are also more prone to dam- 
age than, for instance, a jxC in office computer equipment. 
Office computers typically use well-regulated power sup- 
plies, usually operate in a mild operating environment, and 
have probably been subjected to EMI design rules. A |j.C that 
drives a relay directly or indirectly is subject to voltage tran- 
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sients that the relay's inductive coil causes and to RF noise 
that arcing across the contacts of the relay generates. 

Even seemingly innocuous designs, such as driving an 
indicator lamp or LED, can cause problems. For instance, 



problems can occur if you install the lamp or LED where a 
person can touch them and Induce sufficient ESD into the 
connecting wires that lead back to the \lC. Also, battery- 
powered |j,C equipment is susceptible to several problems: 



Figure 1 



12V 
BATTERYO- 
SUPPLY 



NO PROTECTION FOR REVERSE 
BATTERY, VOLTAGE SURGES, 
SHORTED LOADS 



NO SHUTDOWN PROTECTION IF 
(iC OH MOSFET FAILS 



COMMON 



NO LOW-VOLTAGE 
RESET CAPABILITY 



5V 

5 X NO FILTER CAPACITOR 9 
ONV cc TOVss^ 



LACKING EMI 
FILTER — ^. 



ON/OFF 



(a) 



— SPEED POT 
50k 

RESISTANCE TOO HIGH 
ADC LEAKAGE ERRORS 




5VO 



NOISY ADC REFERENCE 




V co ADC REF 

RESET OSC 



IRQ" 



ADC 



8-BIT \iC 
WITH ADC 



OSC 
OUT 

ADC 

ADC 
COM 



LACKING EMI 
FILTER 



1 

J 



«o^,T?™» N0 PROTECTION 
OSCILLATOR FOR uC IF , 

NOT COMPENSATED DRA | N . T 0-GATE 

Insufficient 
gate drive 
capability 



LACKING EMI FILTER 




T 



ADC COMMON REFERENCE 
SHOULD BE NEAR SENSE 
RESISTOR COMMON 



> CURRENT-SENSE 

> RESISTOR 



REVERSE BATTERY, VOLTAGE 
SURGES, SHORTED LOADS PROTECTION 



12V BATTERY 
SUPPLY 



COMMON O- 



VOLTAGE REGULATOR 

INCLUDES (lC 
WATCHDOG FUNCTION 



POWER 
COMMON 



ISOLATES (iCvf 
POWER SUPPLY 
FROM POWER 
STAGE 



VOLTAGE REGULATOR & 
WATCHDOG INTERRUPT 



X 



<— Ih'-vw 



MOTOR 5" 
ON/OFF A 



EMI FILTER 
AV 



SPEED POT 
1k 



look; 



EMI FILTER 
■WW— J- 




(b) 



r ADC TESTS FOR "OPEN 
V POT," WHICH COULD 
RESULT IN MAXIMUM MOTOR 
SPEED CONDITION 



WATCHDOG PULSE 
-05V 



MOTOR SHUTOFF 
IF MOSFET FAILS 

cr-o 



OUT 



RESET 



vcc 

OSCILLATOR 
USES AT-CUT 
CRYSTAL 



ADC REF 



8-BIT uC 
WITH ADC 



ADC 



ADC 



OSC 

OUT 
OUT 

ADC 



ADC COM 




<3f 




5.1V VOLTAGE CLAMPS ARE T 
USED WHERE 1 2V MAY _ 
OCCUR DUE TO A PART 
FAILURE 



EMI FILTER 

ADC TESTS FOR MOTOR VOLTAGE AND 
POWER-SUPPLY VOLTAGE. IF MOTOR 
VOLTAGE DOES NOT CORRESPOND 
TO USER SET SPEED, THEN POWER 
STAGE HAS FAILED, AND THE'rELAY 
IS TURNED OFF. , 



. _ 



A |iC power-control circuit can contain many potential problem areas (a), but you can use numerous protection methods to 
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Figure 2 
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and extreme temperature/humidity 
environments. 

In addition to system-related prob- 
lems, jjiCs are susceptible to their own 
particular problems. Excessive voltage 
levels are exceptionally dangerous to 
semiconductors. Exceeding the semi- 
conductor's breakdown-voltage thresh- 
old can burn a hole into the transistor's 
die in a few microseconds depending 
on the voltage spike's energy level. The 
exact failure effect correlates to the 
voltage fields and current densities in 
the semiconductor's structure. The typ- 
ical m.C data sheet for an MC68HC05 
(or similar device), for example, lists 
maximum voltage and current levels 
that the p.C can survive. An interesting 
aspect of these maximum ratings is 
that the m-C can still succumb to an 
operational failure but not suffer permanent electrical dam- 
ge when subjected to voltage or current levels that are with- 
in its maximum data sheet's specifications. 

Figure 2 illustrates a typical p,C's I/O-port circuit design. 
Internal diodes connect from the port line to both supply 
voltage (V cc ) and common (V^. These diodes conduct and 
clamp the input voltage if the port-line voltage level exceeds 
V cc by about 0.5V or exceeds by about -0.5V. 

Relying on the internal diodes to contain excessive volt- 
age transients on the jjiC I/O lines is not recommended, espe- 
cially if the clamp current levels are above a few microamps. 
When internal diodes operate as clamps, current has to flow 
through micron-sized pathways or metalization in the p,C 
and out to the common or V cc bus. If several port lines are 
in a clamp mode, the total clamp current can reach levels 
that create significant voltage drops in the internal V cc or V^ 
pathways. These voltage drops can affect the |xC logic states 
or, even worse, can generate enough heat to cause perma- 
nent damage to the jiC's structure. 

Using the ji.C port lines to conduct clamp current can also 
lead to more trouble than just excessive power or voltage 
drops if the external voltage transients contain high fre- 
[uencies. As Figure 2 shows/the \lC internal clamp diodes 
likely to be more complex bipolar elements that are sub- 
ject to latch-up under certain conditions. These conditions 
elude voltage transients of an RF nature that many wire- 
types of applications can generate. 
Externally generated noise spikes on any |j,C line can 
induce erratic operation. These spikes can cause the program 
o crash or lock up, can cause data-direction registers to 
change state, and can reset or corrupt internal timers. Noise 
spikes are a normal design consideration in any ijlC design. 
As a quick test, EMI experts recommend that you operate a 
high-powered cellular or mobile transceiver in close prox- 
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The simple diode clamps on the I/O lines may in reality be more complex structures 
that can cause latch-up problems if subjected to signals with extremely fast slew 
rates. 

imity to the \i.C prototype design. If the (xC locks up or oper- 
ates erratically, serious EMI lab testing is in order. Operating 
the |xC prototype design near an automotive-ignition sys- 
tem gives a good indication of EMI tolerance. ESD test gen- 
erators are also available that can apply ESD to the external 
wiring, switches, and control panel to verify ESD endurance. 

Protect against an out-of -control program 

You must also guard against an out-of-control program. 
Some op-codes exist that can invoke some p,Cs into a self- 
test mode. If, by chance, an out-of-control program or a 
"hole" in the program manages to allow the (jlC's program 
register to load and execute a special self-test code, the jjlC 
ignores its user program and performs a built-in self-test rou- 
tine. Usually, only a complete power-down and normal start- 
up can reset the p,C out of a self-test mode. Some program- 
mers actually search all of their assembly object listings for 
any of these self-test data codes and rewrite the program to 
eliminate these particular codes. Raising a certain pin to an 
abnormal voltage level during a reset can also invoke 
unwanted self-test modes. 

Check with the |i.C manufacturer to verify how the self- 
test mode operates and then take steps to ensure that your 
system doesn't inadvertently invoke this mode during the 
application's normal operation. You can write some initial- 
ization routines to perform a limited circuit test of the appli- 
cation. If this test detects a failure, you can put the controller 
in a "service required" mode. Testing both critical input-sen- 
sor lines and power-stage control lines is recommended 
practice. Some applications dedicate a \xC to perform just 
this function at all times. 

A technique to catch an out-of-control program is to add 
several "no-ops" instructions followed by a software inter- 
rupt at the end of each program sequence or subroutine. 
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(The software interrupt halts other program activity, and you 
use it instead of a jump instruction.) The software-interrupt 
routine forces a reset of the jjlC and can toggle an I/O line to 
alert the user or programmer that a major program error has 
occurred. Another method to help ensure reliable |xC oper- 
ation is to use two identical ji.Cs whose output lines are fed 
to an AND gate. Both jtCs have to compute the same results 
and output the identical logic 1 signals before the AND gate 
will allow the logic 1 signal to pass though to a power-con- 
trol stage or other critical output element. 

The normal watchdog routine, in which the program 
must periodically reset an internal or external timer, can also 
detect a program lockup. The no-op instructions followed by 
a software interrupt may detect a program fault faster than 
can the watchdog routine, depending on the watchdog 
timer's value. Other items that cause mysterious program 
faults are a poor reset-control circuit, floating interrupt lines, 
or power-supply brownouts. Often, the program runs fine in 
the development-system environment but fails after you 
electrically program the |xC and run it in a stand-alone 
mode. In many cases, this failure results from an incorrect 
reset or interrupt design in the user's circuit. The develop- 
ment system usually has some type of built-in reset and 
interrupt-control circuits that allow the p,C to operate. 

You should terminate all unused |xC pins with pullup or 
pulldown resistors. Directly connecting unused lines to 
or V cc can spell trouble if the n.C inadvertently sets the port 
line's data-direction registers as outputs, which might hap- 
pen with an out-of-control program or simple program error. 

Another reason to use termination resistors rather than 
direct connections is that, during reset, all of the port 
lines go to a high impedance, allowing output lines to float. 
This high impedance can wreak havoc if the output lines are 
directly driving a high-impedance power device, such as a 
power MOSFET. Any slight leakage or EMI can turn on the 
MOSFET during the reset period, which lasts until the (xC 
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Input-line protection methods include a series resistor for cur- 
rent limiting, voltage clamping, and the suggested ubiquitous 
RC filter. 



starts executing the port-initialization code. Note that some 
n,Cs include internal I/O-port-termination resistors to mini- 
mize this problem. 

Understand the basis of EMI problems 

Dealing with EMI problems is a large part of ensuring a 
reliable product. Realizing what causes EMI requires a review 
of some fundamentals. Familiarity with the limitations of 
various CAD tools and (iC-development systems is also 
important. 

You normally control an inductive load using a device, 
such as a relay/contactor or power transistor, to switch the 
current through the inductor. A i^C output-port line can also 
directly control low-power loads. The difficult aspect of 
switching inductive loads is that, when an inductive load is 
switched off, a collapsing magnetic field builds up a counter 
voltage (CEMF) whose amplitude is related to the induc- 
tance, coil current^coil resistance, and the rate at which the 
current switches off. The formula to calculate the inductive 
kickback voltage is 

E^Udi/dt), 

where E PEAK is the kickback voltage, L is the inductance in 
henries, di is the current amplitude delta in amperes, and dt 
is the time period of the switching event in seconds. 

Putting this formula into practice reveals that the fast |xC 
switching speeds — typically 50 nsec — and miniature 5V 
relays or any inductive load can generate a significant kick- 
back voltage. Miniature 5V relays typically have coil induc- 
tances of tens of millihenries. Generally, lower coil currents 
mean more windings, which results in higher inductance 
values. A test of three generic 5V miniature relays indicated 
the following coil resistance and inductance values: 55(1 
with 26 mH, 70ft with 65 mH, and 250ft with 77 mH. Using 
the previous formula, theoretical peak voltages of over 
20,000V are possible if these miniature relays switch at 50- 
nsec speeds. Adding a simple clamp diode across the coil is 
the usual fix, but introduces another set of problems. 

When you initially energize the relay coil, its current rises 
at a slope mostly controlled by the coil's inductance and 
resistance values and by the applied voltage. The inductor's 
current continues to ramp up, with the dc resistance gener- 
ally limiting the maximum level. If the coil's pulse width is 
too narrow, the coil current may not reach its maximum 
value, which reduces the kickback voltage. This lower volt- 
age may not correctly operate the relay mechanism. 

You should keep track of the maximum inductance values 
of any component that electronic devices switch. This state- 
ment holds true for so-called "noninductive" devices, such 
as lamps or resistors. All components have a certain amount 
of inductance, which will become critical when the switch- 
ing edges are too fast. 

When an open-collector (bipolar type) or open-drain 
(MOSFET type) |j.C output line switches any inductor, the 
inductor's kickback voltage can easily exceed the transistor's 
breakdown-voltage rating and may cause a secondary-break- 
down failure. Once the transistor enters secondary break- 
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down, its blocking voltage diminishes, and the remaining 
inductive energy literally burns a hole into the silicon chip. 
Some power transistors, such as avalanche-rated power 
MOSFETs, act like zener diodes if the blocking voltage 
exceeds nominal. These transistors do not fail until their 
power-dissipation rating exceeds the maximum. 

PC-board layout affects EMI 

Most designers use software layout tools to design pc 
boards, and several such programs use an autorouter to con- 
nect the traces. This method works fine for low-speed and 
low-current circuits. However, big problems usually occur 
when an autorouter places high-speed and high-current 
lines without some guidance from an EMI-knowledgeable 
engineer. Some companies actually require that experienced 
EMI engineers operate the layout tools. 

A few general rules can help minimize EMI difficulties in 
pc-board layouts: 

• Make high-current switching lines as short and as wide 
as possible. 

• Use the "three-to-one" layout rule: the trace width 
should not be less than one-third of its length. 

• Route clock lines or high-speed lines near V c 

• Slow switching edges if possible. 

• Carefully route ADC lines; don't mix the reference pins 
with the Vq. and V M current-carrying traces. 

• Follow the pc-board-layout rules that the pC data sheet 
or application note recommends. 
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A buffer comparator (a) can convert a slow slew-rate signal into a pulse suitable 
for triggering a timer input. A twisted-wire-pair driver and receiver (b) is useful in 
a noisy application, such as a motor-speed sensor. 



When analyzing EMI problems, remember the basics: the 
maximum frequency and amplitude of the generated or 
received signal; the time and place that the EMI occurs (such 
as, failures occur every time a high-power radar antenna 
swings into sight or when the circuit is near high-voltage 
power-distribution lines); the impedance of the suspicious 
network; and the physical aspects of the traces or wiring. 

Clock and oscillator circuits can be potential EMI prob- 
lems. Most fxC manufacturers usually recommend a particu- 
lar oscillator pc-board layout. Recent jj.Cs use low-power 
oscillator designs to minimize radiated emissions. Placing a 
small metal shield around the entire (iC and associated com- 
ponents can also be effective to minimize EMI problems. 

Be sure to adequately decouple the V cc line, because this 
line conducts high-frequency currents. The placement and 
values of the |iC's V cc decoupling capacitors are somewhat 
critical. The capacitors should be close to the V cc and V x pins. 



Program bugs can bite 

An external voltage spike that upsets the p-C's internal 
logic can cause an out-of-control program. Undetected 
errors in the program can also cause a failure. Programs in 
jaCs tend to be hand-packed to minimize ROM size and 
increase throughput. Unfortunately, errors can creep in. 
Even programs written in high-level languages can fail if 
there is a bug in the complier, for instance. 

Most ixC-control designs deal with external events and 
generally use timers as part of some calculation. When a 
timer generates an interrupt or an 
external event needs servicing, the nor- 
mal program flow halts, and the \i,C 
processes the interrupt. Because exter- 
nal events can interrupt the user's pro- 
gram at any time and thus can halt the 
main routine or its subroutines 
(depending on preset control logic), 
these routines can get lost during one 
of these numerous interruptions. This 
problem can happen if too many sub- 
routines are nested together, allowing 
the program stack RAM to read/write 
into normal user RAM. 

If a random glitch does occur during 
the course of debugging a |xC program 
or testing the ixC system, you should 
not dismiss the problem without 
recording the conditions that were pre- 
sent. If another random glitch occurs 
again, you can compare it to the first to 
determine if the events that caused the 
glitch are truly random. The |xC-devel- 
opment tools can help if they are capa- 
ble of real-time analysis. Most low-cost 
(xC-development systems are adequate 
for preliminary program development 
but lack the sophistication to show 
exactly what is happening inside the 
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M.C's CPU and control registers during 
reset, interrupts, and timer rollovers. 

Watch for a sagging V cc 

Some |xCs may not recover well if the 
V cc sags momentarily. This situation is 
different from a normal power- 
down/power-up condition when the 
V cc drops to zero and then goes back to 
its normal value. The \lC's internal 
power-on reset usually can deal with a 
normal voltage swing from zero to full 
V cc . However, if V cc slowly sags by 50% 
and then slowly rises to normal, the nC 
may not recover. External 11C- supervi- 
sory devices, such as the MC34160, 
MC34164 (both from Motorola, 
Tempe, AZ), MAX814 (Maxim Integrat- 
ed Products, Sunnyvale, CA), and CS- 
8151 (Cherry Semiconductor, East 
Greenwich, RI), can monitor the V cc 
bus and generate a reset when V cc sags. 

A good test to determine whether 
the ijlC is vulnerable to brownout is to 
run the ixC at normal voltage, slowly 
decrease the V cc until (xC errors occur, 
and then raise the V cc slowly back to 
normal. If the program does not recov- 
er, a power-supply-supervisory design 
is necessary. Supervisory devices are fre- 
quently worth the extra cost in (iC 
power-control designs, and you should 
design these devices in from the begin- 
ning. If rigorous testing shows the 
supervisory circuit is not necessary, simply don't assemble 
the parts onto the pc board. Some small wasted space is bet- 
ter than having to redesign the board later to add the super- 
visory circuit. If you use a low-voltage detection and super- 
visory device, its operation should match the ixC's minimum 
V cc specifications. For example, if the (xC is rated to operate 
at 5V±10%, the supervisory device should force the ixC into 
a reset mode if the V cc sags below 4.5V. 

Account for the operating environment 

Temperature, thermal shocks, and moisture all affect the 
long-term reliability of most active electronic components, 
including ixCs. To a high degree, the (iC package and inter- 
nal die-mounting methods determine how well the ijlC will 
hold up long-term in a stressful environment with many 
power-control systems. A low-cost plastic package may suf- 
fice for applications in an office environment, but for auto- 
motive under-the-hood or motor controls in a factory set- 
ting, superior |xC packages are necessary. 

Some design methods can also increase the jj.Cs chances 
of survival in a hostile environment. Using the lowest clock 
frequency possible keeps the ii.Cs power dissipation low. 
Using a heat sink or other cooling device on the iaC helps to 
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This circuit (a) provides output-line protection but switches the MOSFET rather 
slowly. Adding an active turn-off element (b) discharges the MOSFET's gate at a fast 
rate. 



reduce the iaC's die temperature. Potting or encapsulating 
the \x,C provides added protection against moisture or exter 
nal chemical contamination. 

Conducting extreme temperature testing of a ixC-basec 
product determines the exact failure points. If the failure 
points are close — within 20% for example — to the expectec 
worst-case operating temperatures, a redesign is probabh 
necessary. In CMOS semiconductor devices, high tempera 
tures increase leakage currents; cold, temperatures decreast 
switching and internal propagation delay times. Alway 
assume that the product will operate in a worst-case tern 
perature condition and design accordingly. An operating 
temperature range of -40 to +85°C is a reasonable prospec 
for many products. 

Simulation can catch some problems 

Circuit-simulation programs can help to evaluate th< 
results of excessive voltage spikes or other possible abnor 
malities if you know where these voltage spikes or events wil 
occur. The simulation program's accuracy is limited by tin 
model's specifications and, in general, you can't totally trus 
such programs to find all the potential problem areas. Man; 
semiconductor models are not 100% complete or up-to-dat< 
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and may not have been thoroughly tested in unusual modes 
of operation. 

Thus, simulation programs are powerful tools for devel- 
oping circuits and even system-level designs, but they can- 
not guarantee that the actual product is totally perfect. In 
some cases, the simulation results that do show problem 
areas are not immediately obvious. Generally, trouble spots 
occur on or near signal transitions. You should examine 
these areas on at least a l-(xsec scale with a minimum simu- 
lation resolution of 10 nsec. 

Because simulation can't reveal all problems, hardware 



debugging is inevitable. Unfortunately, digital oscilloscopes 
can hide or filter out fast, narrow voltage spikes. Always 
search for voltage spikes with a timebase setting that can reli- 
ably show 10- to 50-nsec signals; Using a slow 100-^sec time- 
base often does not show the trouble spots. Using an analog 
oscilloscope to catch a fast single event mixed in with a lower 
frequency repetitious signal isn't easy. Digital scopes are very 
good at capturing fast single-event signals, provided that 
you properly set the scope. You can miss fast nonrepetitive 
pulses when the digital scope is set to display a much slow- 
er repetitive-type signal. You may have to use different types 
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A simple switching circuit (a) can produce high levels of EMI (b). Adding a freewheeling diode removes the voltage spike at 
V D but does not decrease EMI levels. Adding a 0.1 (iF capacitor, C v does significantly reduce EMI (c). Finally, using C, and replac- 
ing the freewheeling diode with an RC snubber produce the lowest EMI results (d). 
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of oscilloscope to look for different signals. Three types of 
oscilloscopes good for debugging (iC-control designs are a 
120-MHz analog storage scope; a general-purpose, 150-MHz 
digital scope; and a 2-GHz digital scope. You can also use a 
spectrum analyzer for EMI testing. 



Consider the circuit-design solutions 

Fortunately, you can protect your circuit against potential 
overvoltage, EMI, low-voltage, program, and environmental 
problems. Design methods that can minimize these prob- 
lems start with a basic principle: use lowpass filters on every 
liC line to set the upper frequency limit, depending on the 
application. Without these filters, the p.C lines act as anten- 
nas, and the \iC's internal logic circuits and program stabil- 
ity suffer. 

Voltage spikes from noninductive sources can couple by 
parasitic capacitance into the p,C lines by various means: 
poor pc-board layouts, insufficient isolation between |xC 
lines to the power-control stage, or mounting the jj-C too 
close to a high-voltage field source. One starting point in 
protecting the j»,C-input lines would be to assume that all |xC 
lines can be exposed to voltage spikes similar in magnitude 
to the worst-case voltage levels in the system. For example, 
in an automotive application, any line 
*hat leads to the outside can be exposed 

either vehicle ground or full battery 
voltage. In a motor-control applica- 
tion, the ixC external lines may be sub- 
ject to full ac-line voltages. 

Magnetic coupling can also be a 
problem if the ixC's lines or the \xC itself 
is located near an intense magnetic- 
field source, such as a high-power 
transformer or high current power con- 
ductors. You can use metal shields to 
reduce magnetic coupling. 

Figure 3 shows protection mi 
for ixC-input lines. The basic method is 
to use zener or Schottky diodes for volt- 
age clamping and series resistors for 
current limiting. You should also 
include the capacitor to form the RC fil- 
ter. These methods work well for p,C- 
input lines. Set the RC filter's time con- 
stant for the lowest frequency possible. 

Input ports, such as timer inputs, are 
sometimes set to toggle on switching 
edges and require a minimum dv/dt to 
operate correctly. For this type of input, 
the RC-filter method may not suffice, 
and a buffer element may be necessary 



input signal, such as a sine wave, with slow rise and fall times 
plus some noise into a pulse with fast switching edges. 

Buffer serial-data lines 

For serial-data lines that must work in an electrically noisy 
environment, you can also use a twisted-wire-pair transceiv- 
er to clean up noisy input signals (Figure 4b). This receiver 
design has high common-mode noise rejection and a low 
impedance. The differential line drivers and receivers oper- 
ate from —7 to +12V common mode, making this design 
suitable for many electrically noisy environments, such as a 
motor-speed and angular-position sensor. 

In Figure 4b, the speed-sensor transmitter circuit uses a 
slotted optical switch, a high-performance line-driver IC, 
and a TO-220-sized 5V regulator. The slotted optodetector 
uses Schmitt-trigger logic, which provides hysteresis for 
noise immunity and pulse shaping. The twisted-wire pair 
connects to the receiving circuit that uses a quad differential 
line-receiver IC. The receivers connect to the motor drive's 
ixC-input port. A simple lowpass RC filter slightly slows the 
speed sensor's signal, which helps to clean up the signal in 
the presence of strong RF fields. 

In addition to input lines, you should also pay particular 



(Figure 4a). The buffer consists of a 
-*mparator with high gain, and a trip 
int is set approximately midway 
between V cc and V^. You can modify 
the comparator design to allow hys- 
teresis, which has the effect of a 
Schmitt trigger; the circuit converts an 
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A poor pc-board layout uses narrow traces for power and ground, and allows the 
power traces to mix at various points on the board. An improved version (b) splits 
the power traces back to their source points. 
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attention to interrupt and reset lines to minimize the 
chances of extraneous voltage spikes. You can program some 
ji.Cs to respond to either edge-triggered or level-sensitive 
external interrupts. Using the level-sensitive option allows 
more noise immunity at the expense of reduced response 
time to an external event that forces an interrupt. 

To check some of these input connections, you can pro- 
gram the ji,C to perform some simple debugging steps. (You 
can also use a real-time development system if available.) 
One debugging method to verify that an external event or 
any particular routine is functioning correctly is to toggle an 
unused output port when a particular event happens. For 
example, if an external pulse is supposed to drive an inter- 
nal jjlC counter whose value is used to perform some calcu- 
lation, you want to know that the input pulse increments 
the counter only once. A noisy input pulse may advance the 
timer incorrectly. If an output pulse occurs every time the 
nC increments its counter, an external oscilloscope can ver- 
ify the operation. You may also discover that both an errant 
program routine and a poor pulse input are toggling the 
timer. 

General output-line considerations 

As previously discussed, connecting a |j.C directly to an 
inductive load usually requires voltage-clamping networks 
to protect the pC's internal silicon structures. Leaving out 
some form of voltage-transient protection may result in 
minor erratic program operation or, in the worst case, jiC or 
other device failures. Even an pC indirectly driving an induc- 
tive load is subject to some degree of voltage-transient ener- 
gy that propagates through the load-control power transis- 
tor and back into the jiC's output-port line. 



Sometimes, the power device fails first because of its inad- 
equate protection against excessive CEMF or other load 
faults. If the power-device design does not limit the actua- 
tor's CEMF voltage or protect against power-supply voltage 
spikes, the power device may self-destruct and allow high- 
energy levels to propagate through the more expensive and 
difficult-to-replace \iC device. 

There are several CEMF-protection methods possible. One 
solution is to select a semiconductor switching device with 
sufficient voltage-breakdown rating so that it never enters a 
secondary-breakdown condition. Unfortunately, the word 
"never" is subject to Murphy's law, and the transistor prob- 
ably is subject to some degree of overvoltage stress during its 
lifetime. If the power MOSFET shorts out with a drain-to- 
gate short (as happens in many cases), the jiC-output line is 
subjected to the MOSFET's full-drain voltage, which could be 
several hundred volts. 

Figure 5a illustrates protection for jxC-output lines 
against excessive positive and negative voltage transients. A 
Schottky barrier diode in series with the output line to the 
MOSFET provides isolation against positive-going voltages 
from the MOSFET's drain-to-gate path. This scheme does 
compromise the circuit's operation by lowering the available 
gate voltage by one Schottky-diode drop and does not allow 
the gate to discharge through the p.C output. 

A pulldown resistor discharges the gate. This resistor's 
value can't be too low or the jjlC output gets loaded down 
too far to ensure a sufficient gate-bias level. A typical 5V-type 
output can supply 0.8 mA at a level of 4.2V. The corre- 
sponding load value is 5250fl, which leaves only about 3.9V 
gate bias after you subtract the Schottky-diode drop. A resis- 
tor in series with the gate limits the maximum current from 
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Optoisolators provide the proper Isolation between the |xC and a high-voltage power stage. 
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the MQSFET and establishes a passive element that 
mostly controls the MOSFET's turn-on switching 
time. A variation on this method is to add an active 
turn-off element (Figure 5b). 

One additional note about directly driving a 
MOSFET: The gate-input capacitance can draw a 
high peak current from the pC. You need to select 
the value of the series-resistor value to limit the pvC 
peak current to under 10 raA. The MOSFET's turn- 
on switching time depends on how fast its gate- 
input capacitance charges up, which may require a 
significant current peak for a large MOSFET. The jxC 
output thus requires a buffer stage to drive large 
MOSFETs. 

Several MOSFET and insulated-gate bipolar-tran- 
sistor drivers are available for interfacing the jxC- 
output line to drive MOSFETs or similar power 
devices. There are many other IC devices available 
for driving lamps, relays, LEDs, or displays that eas- 
ily interface to the \xC. 
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Reduce EMI in power control 

Figure 6a shows a switching circuit in which a 
nC drives a simple power-control stage. An 
avalanche-rated power MOSFET handles the relay's 
inductive kickback voltage. Unfortunately, this 
design generates significant EMI that can affect the 
H.C and other nearby sensitive devices (Figure 6b). 
Two conditions in this switching circuit contribute 
to EMI: the pC output's high-speed transitions, which drive 
the power MOSFET, and the inductive kickback voltage, 
which causes the MOSFET to avalanche (act like a zener 
diode). 

Slowing the switching edges of the jjlC output that drives 
the MOSFET's gate helps minimize EMI because the MOS- 
FET's switching times are no longer ittthe RF range. A (xC- 
output signal can be less than 100 nsec. If the power MOS- 
FET switches at anywhere near this speed, serious EMI will 
result. 

One simple method to slow the signal's edges is to add a 
series resistor and a gate-to-source capacitor. This scheme is 
similar to the RC filter for the pC's input lines. To minimize 
the chance of parasitic RF oscillations during switching, the 
series resistor value should be 1 kfl or less, and the gate-to- 
source capacitor value should be fairly large — 0.01 to 1.0 
jiF — to slow the gate-drive signal-transition times. You 
should connect the gate-drive source lines close to the source 
lead and place these lines out of the source lead's load-cur- 
rent path. 

Figure 6c shows the positive results of adding a 0.1 -|xF 
gate capacitor. This RC network is a low-cost fix but does 
introduce a timing delay and extra power dissipation in the 
MOSFET. The extra power dissipation occurs because of the 
power MOSFET's slow turn-off and may require increased 
heat sinking for the MOSFET. 

You should note one other point about using a RC filter 
in the MOSFET's gate drive. A typical power MOSFET 



1. FUSE PROTECTS AGAINST ELECTRICAL FIRES, BUT GENERALLY DOES NOT 
PROTECT AGAINST SEMICONDUCTOR FAILURES. THE SEMICONDUCTOR DEVICE 
USUALLY BLOWS OPEN BEFORE THE FUSE MELTS. 

2. A SERIES RESISTOR SETS THE MAXIMUM SOURCE IMPEDANCE OF THE MODULE'S 
POWER SOURCE. THE RESISTOR WILL LIMIT PEAK CURRENT LEVELS DURING 
ABNORMAL OPERATION. 

3. VOLTAGE REGULATOR ENSURES CONSTANT VOLTAGE TO hC AND OTHER 
CIRCUITS. SOME VOLTAGE REGULATORS INCLUDE (iC RESET FUNCTIONS. 

4. ISOLATION RECTIFIER PROTECTS AGAINST REVERSE POWER SOURCE 
CONNECTIONS— IMPORTANT FOR AUTOMOTIVE APPLICATIONS. SCHOTTKY 
RECTIFIERS DROP LESS THAN 0.5V. 

5. TRANSIENT SUPPRESSOR LIMITS THE MAXIMUM SOURCE VOLTAGE. IT IS VERY 
IMPORTANT TO PROTECT SEMICONDUCTOR DEVICES FROM OVERVOLTAGES. 
THE SERIES RESISTOR WILL HELP TO LIMIT THE PEAK CURRENT THAT THE 
TRANSIENT SUPPRESSOR SUSTAINS DURING A VOLTAGE SPIKE. 

6. LARGE FILTER CAPACITOR SMOOTHS OUT VOLTAGE SOURCE FLUCTUATIONS, 
AND, IF LARGE ENOUGH, CAN HOLD SUPPLY VOLTAGE FOR A FEW SECONDS 
AFTER MAIN POWER IS SWITCHED OFF. THIS IS USEFUL FOR ENSURING 
STABLE OPERATION OF MOTION-TYPE APPLICATIONS. 

7. OPTIONAL ZENER REGULATOR PROTECTS AGAINST VOLTAGE REGULATOR 
SHORT AND LIMITS V cc VOLTAGE SPIKES. 



These power-supply-design elements protect a |xC against fluctuating 
and reversed-power voltages. 



exhibits high transconductance, which means only a small 
gate-voltage variation is necessary to turn the load on or off. 
The gate- voltage variation equals the load current divided by 
the MOSFET's forward transconductance. For example, a 
MTP3055EL's forward transconductance (g K ) is 5.0 mhos 
minimum. If the load current is 0.2A, then the AV GS is only 
0.04V (AV GS =0.2/5). Therefore, only a small portion of the 
gate- voltage transition time affects the switching times of 
the load, and a large gate-to-source capacitor is necessary to 
slow the gate-voltage transition time. Unfortunately, slow- 
ing the power MOSFET may not eliminate EMI, because 
switching relays or similar type loads with very slow switch- 
ing is usually not possible. 

The other EMI source is from the inductive-kickback volt- 
age. Adding an external diode, which is sometimes called a 
"freewheeling" diode, across the relay stops the power MOS- 
FET from avalanching and removes a significant spike at V D . 
You might think that this step would significantly reduce 
EMI. However, the diode's switching is so fast that the EMI 
is still as high as that in Figure 6b. (Using the freewheeling 
diode in addition to capacitor C G results in EMI levels 
between those in Figures 6b and 6c.) The freewheeling diode 
also slows the solenoid's or relay's mechanical turn-off per- 
formance. 

Replacing the freewheeling diode with an RC snubber 
reduces EMI and allows a good turn-off mechanical 
response. The snubber capacitor's value should be large 
enough to prevent the power MOSFET from avalanching. 
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The specific application determines the exact value of the RC 
snubber. However, a 1-fxF metal-film capacitor and 10fl resis- 
tor are good starting values. 

Thus, by adding an RC filter to the gate drive to slow the 
power transistor's switching and an RC snubber across the 
load to contain the inductive kickback voltage, the ^C can 
drive a power MOSFET with minimal chance for EMI. Figure 
6d shows the low EMI that results from using both tech- 
niques. 

Protect the ADC inputs 

Reducing errors in |xC ADC ports is especially important 
for applications that constantly monitor the ADC inputs for 
slight variations. You can trace many ADC errors back to sev- 
eral causes: poor pc-board layout, insufficient filter capaci- 
tors, improper placement of the filter capacitors, and a high 
ADC source impedance. 

Poor pc-board layout: The most single important design 
goal is to not mix the ADC grounds and V cc reference into 
traces that conduct high pulse currents. Figure 7 illustrates 
both a poor and good layout for ADC pC signals. Note how 
the improved version splits the power traces back to their 
source points. 

Insufficient filter capacitors: Forgetting that all lines, 
traces, wires, or internal device leads are always inductive 
leads to noisy V cc and commons if you don't use filter capac- 



itors of sufficient size and type. In some cases, a separate reg- 
ulator or power-supply diode isolator is necessary to supply 
the V reF + pin of the ADC. 

Improper placement of filter capacitors: You need to place 
bypass or decoupling capacitors as close as possible to the 
source of the high-frequency noise. For a (xC design, this 
means bypass capacitors right at the n>C's and pins, 
in addition to the voltage-regulator output and input pins. 
High ADC source impedance: The nC ADC stage does 
exhibit a slight leakage current, usually less than 10 nA. 
Thus, to maintain a 1-bit accuracy (0.01953V) for an 8-bit, 
5V channel, the total input resistance must not exceed 1.9 
kfi (R^p^O.OmV/lO jjlA). Check the y,C's data sheet for the 
exact ADC leakage current. Adding a simple RC filter to the 
input is acceptable if the filter's time constant is well below 
the sample rate required by the application. Remember that 
you need to keep the RC filter's resistor value plus the volt 
age source's impedance low to minimize errors. 

Isolate m-C lines 

Connecting an (xC's output or input lines to a high-volt 
age power stage requires the use of excellent isolatioi 
devices. Optoisolators, such as those in Figure 8, provide 2 
high degree of isolation from high-voltage waveforms ir 
large motor drives or power-line-conditioning equipment 

(continued on pg 195 
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The important specification for any isolation device, besides 
its maximum isolation voltage, is the common-mode volt- 
age rejection. If there is a large amount of internal capaci- 
tance in the optoisolator input-to-output path, the chances 
are high that enough energy will couple through the 
optoisolator to cause trouble with a u.C line. 

To save costs, some designs allow the p,C to float on a 
high-voltage bus. This scheme saves the cost of isolating the 
u,C from the high-voltage bus but requires some form of iso- 
lation to the user-operated inputs. The additional difficulty 
with this method is in field servicing. The technician may 
accidentally ground out the u.C's common with catastroph- 
ic results. As a matter of principle, if the \lC is accessible for 
debugging, connecting test probes to it should not represent 
a lethal hazard for the service personnel. 

Stabilize the power supply 

The u,C's stability is only as good as its power supply. 
Power-control circuits can have intermittent power connec- 
tions or users that play with the power switch. Another com- 
mon problem is reversed power connections caused by bat- 
tery reversal or improper hookups. Reversing the V cc and V M 
on a u,C is usually catastrophic to the u,C die. Figure 9 shows 
some simple methods to protect against fluctuating power 
and reversed power voltages. Adding a zener diode rated just 
below the maximum u,C operating voltage across the u.C's 
and pins is good insurance against a shorted regulator or 
other mishap that would allow excessive u.C supply voltage. 

A good principle to follow is to physically set the supply's 
maximum current level. You can use small, surface-mount 
fuses for this task. In some cases, two different-sized fuses are 
necessary: one large fuse for the power stage and a small fuse 
for the control logic. 

Adding a series resistor to the power-supply-regulator 
input also limits the maximum peak-current levels. For 
example, a \x,C design that requires-only 0.01A from a 12V 
supply could use a 5 V regulator with a 100H, 2W series resis- 
tor in its 12V input side. The 100ft resistor would normally 
drop IV but would limit the maximum current to 0.12A in 
a short-circuit condition. More important, by also adding a 
zener-diode transient suppressor to the regulator's input, the 
resistor limits the zener's maximum peak current when the 
12V supply is subjected to serious voltage spikes. Ml 
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